$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft File: f8JFjIbiXJNFoIUssn6xcnf7gaM.mft (raw, json) Hash identifier: N1XBMjLd8z7qZBc9/UGgbwlQZebWB8oucseYX4iiYW4= Subject key identifier: A0:9D:9D:5B:C8:55:FB:20:68:4B:82:C3:DA:FC:86:D0:60:C0:B2:49 Authority key identifier: 7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 Certificate issuer: /CN=A9191DE0/serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Certificate serial: 0A27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft Manifest number: 0A1D Signing time: Tue 24 Mar 2026 19:34:31 +0000 Manifest this update: Tue 24 Mar 2026 19:34:31 +0000 Manifest next update: Tue 31 Mar 2026 19:34:31 +0000 Files and hashes: 1: f8JFjIbiXJNFoIUssn6xcnf7gaM.crl (hash: 3XNGtagrwnWTA3EKdVNapqV+BXMU2YCNQNhsDyUbdNg=) 2: F898AEBC8F6411EA96126E5DC4F9AE02.roa (hash: CgnP+/rSHkkonAvFRbYmCY32JDnrx7tAgsh6bxIXNeo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:34:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2599 (0xa27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DE0, serialNumber=7FC2458C86E25C9345A0852CB27EB17277FB81A3 Validity Not Before: Mar 24 19:34:31 2026 GMT Not After : Mar 31 19:34:31 2026 GMT Subject: CN=69c2e747-9bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:be:12:17:8d:28:ce:b3:eb:7f:b1:41:26:93: 30:7e:b6:bf:93:78:39:17:7f:b3:39:05:4c:6b:e2: 45:f4:b6:0f:a8:18:11:51:a7:9f:ee:24:2c:b6:ba: 05:28:aa:bc:50:17:a2:9e:7a:49:b7:c0:72:75:e6: 1b:36:81:c6:53:11:f0:e3:be:66:99:56:7a:de:98: 84:12:7c:0f:95:d0:b9:88:ac:e4:5b:c8:e3:35:d0: b8:b0:45:dc:7a:35:b0:a1:21:61:d8:c0:4b:2d:06: 29:bb:5d:96:73:d2:72:9a:d5:b7:07:3d:a0:5a:81: 31:6b:6a:37:d5:87:c0:a7:49:a5:e6:f5:3c:9e:fb: 4d:6a:bd:77:4a:27:9e:c9:c9:a1:1a:26:c8:81:d8: a3:47:e3:04:cc:f3:dc:97:0c:aa:67:06:07:7e:ee: e6:db:e9:1e:41:e3:9d:45:ad:ff:3c:5f:8d:4c:09: 5a:9c:9a:61:f8:06:07:9b:62:19:6f:a9:75:a1:f4: cc:9c:dc:6f:75:02:d3:09:b5:3b:29:b9:5f:be:d6: a2:d7:ea:8a:5a:c0:2b:0f:1a:a3:a8:6f:70:ad:98: b4:f9:f5:44:ec:f7:6e:35:eb:62:c6:ea:a9:b1:70: 45:73:d5:26:0f:3f:87:1e:0c:9d:9e:b6:7c:97:2f: db:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9D:9D:5B:C8:55:FB:20:68:4B:82:C3:DA:FC:86:D0:60:C0:B2:49 X509v3 Authority Key Identifier: keyid:7F:C2:45:8C:86:E2:5C:93:45:A0:85:2C:B2:7E:B1:72:77:FB:81:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8JFjIbiXJNFoIUssn6xcnf7gaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/59CA666E8F6311EAAF078558C4F9AE02/f8JFjIbiXJNFoIUssn6xcnf7gaM.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d9:db:40:78:c9:e3:e8:62:0c:ed:50:20:cc:16:27:01:b9: a9:93:aa:6d:64:35:dd:54:c7:04:87:ac:fc:7c:eb:03:46:92: a3:28:20:f5:c4:1a:e3:96:11:08:40:a6:c2:d3:e2:58:01:e9: 1c:ec:80:43:8d:ae:80:32:01:18:e4:d8:69:3f:fb:ff:e0:bd: b6:aa:d6:2b:94:ed:86:bd:1b:48:62:7d:d4:ad:dc:83:45:4c: 34:94:a7:a4:55:5a:52:a3:e1:d0:c6:78:14:93:71:cb:93:bf: 52:c8:d3:de:98:e4:c8:5d:62:76:b0:ad:20:11:0d:d1:d0:89: 81:b1:4d:b5:21:ba:03:08:20:05:da:6b:8e:76:1b:1f:f1:86: b5:92:d6:c2:72:97:a9:92:61:da:53:db:1e:18:98:98:1c:98: 20:77:6a:6a:d1:9c:37:94:73:ca:03:40:93:68:ca:86:a9:18: 21:cb:e1:57:ac:fa:33:f3:26:63:38:2c:07:7e:ad:0f:89:6d: 72:ec:ec:3c:06:49:17:a4:3c:33:9c:50:95:ac:d5:fe:22:80: e9:b4:79:22:d7:0b:17:7a:3a:22:df:ee:17:81:f7:d4:a7:dd: 01:98:c8:fd:4d:97:1d:e9:4b:ca:87:af:c6:12:b6:04:f2:99: 7b:c0:21:df -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFERTAxMTAvBgNVBAUTKDdGQzI0NThDODZFMjVDOTM0NUEwODUyQ0IyN0VCMTcy NzdGQjgxQTMwHhcNMjYwMzI0MTkzNDMxWhcNMjYwMzMxMTkzNDMxWjAYMRYwFAYD VQQDEw02OWMyZTc0Ny05YmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmr4SF40ozrPrf7FBJpMwfra/k3g5F3+zOQVMa+JF9LYPqBgRUaef7iQstroF KKq8UBeinnpJt8BydeYbNoHGUxHw475mmVZ63piEEnwPldC5iKzkW8jjNdC4sEXc ejWwoSFh2MBLLQYpu12Wc9JymtW3Bz2gWoExa2o31YfAp0ml5vU8nvtNar13Siee ycmhGibIgdijR+MEzPPclwyqZwYHfu7m2+keQeOdRa3/PF+NTAlanJph+AYHm2IZ b6l1ofTMnNxvdQLTCbU7Kblfvtai1+qKWsArDxqjqG9wrZi0+fVE7PduNetixuqp sXBFc9UmDz+HHgydnrZ8ly/b8QIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKCdnVvI VfsgaEuCw9r8htBgwLJJMB8GA1UdIwQYMBaAFH/CRYyG4lyTRaCFLLJ+sXJ3+4Gj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MURFMC81OUNBNjY2RThG NjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhKTkZvSVVzc242eGNuZjdn YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4SkZqSWJpWEpORm9JVXNzbjZ4Y25mN2dhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURFMC81OUNBNjY2RThGNjMxMUVBQUYwNzg1NThDNEY5QUUwMi9mOEpGakliaVhK TkZvSVVzc242eGNuZjdnYU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEADtnbQHjJ4+hiDO1QIMwWJwG5qZOqbWQ13VTHBIes/HzrA0aSoygg9cQa45YR CECmwtPiWAHpHOyAQ42ugDIBGOTYaT/7/+C9tqrWK5Tthr0bSGJ91K3cg0VMNJSn pFVaUqPh0MZ4FJNxy5O/UsjT3pjkyF1idrCtIBEN0dCJgbFNtSG6AwggBdprjnYb H/GGtZLWwnKXqZJh2lPbHhiYmByYIHdqatGcN5RzygNAk2jKhqkYIcvhV6z6M/Mm YzgsB36tD4ltcuzsPAZJF6Q8M5xQlazV/iKA6bR5ItcLF3o6It/uF4H31KfdAZjI /U2XHelLyoevxhK2BPKZe8Ah3w== -----END CERTIFICATE-----Generated at Thu Mar 26 16:57:07 2026 by rpki-client